PeopleSoft Flaw Breaches US Insurance Regulatory Association, Exposing Financial Data

The National Association of Insurance Commissioners (NAIC), whose members are the chief insurance regulators of the US states, develops regulatory standards and compiles insurers’ statutory financial reports. Because the data concern insurers’ financial health and credit ratings, unauthorized access could affect regulatory work and industry risk assessments.

The NAIC confirmed that hackers exploited an Oracle PeopleSoft zero-day vulnerability in mid-June 2026 to breach parts of its systems environment, potentially gaining access to internal statutory financial reports and credit-rating agency data. The NAIC said personally identifiable information and financial payment information were unaffected. It has not disclosed the number of affected organizations, the scale of the breach or the amount of losses.